---
id: CVE-2026-34162
title: FastGPT is an AI Agent building platform
summary: >-
  FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the
  FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is
  exposed without any authentication. This endpoint acts as a full HTTP proxy —
  it accepts a …
severity: critical
cvss: 10
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L'
cwe:
  - CWE-306
  - CWE-918
vendor: fastgpt
product: fastgpt
affected:
  - fastgpt < 4.14.9.5
patched:
  - fastgpt 4.14.9.5
published: '2026-03-31'
updated: '2026-07-24'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-34162'
references:
  - url: >-
      https://github.com/labring/FastGPT/commit/bc7eae2ed61481a5e322208829be291faec58c00
    label: security-advisories@github.com
  - url: 'https://github.com/labring/FastGPT/pull/6640'
    label: security-advisories@github.com
  - url: 'https://github.com/labring/FastGPT/releases/tag/v4.14.9.5'
    label: security-advisories@github.com
  - url: 'https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj'
    label: security-advisories@github.com
  - url: 'https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00416
epssPercentile: 0.35595
ingestedAt: '2026-07-24T21:39:13.276Z'
---

## Overview

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.

## Affected

- `fastgpt < 4.14.9.5`

## Remediation

Upgrade past the affected range:

- `fastgpt 4.14.9.5`